PT-2019-12463 · Micro Focus · Micro Focus Service Manager

Publicado 2019-09-18 · Atualizado 2020-08-24 · CVE-2019-11661

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager versions 9.30 through 9.62

Description The issue allows non-SysAdmin users to make changes to certain tables, potentially leading to unauthorized access and modification of data.

Recommendations For versions 9.30 through 9.62, restrict access to sensitive tables to prevent unauthorized modifications until a fix is available. As a temporary workaround, consider disabling non-SysAdmin user access to the affected tables until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2019-11661

Produtos afetados

Micro Focus Service Manager

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-11661 · Aviso do Fabricante
• https://softwaresupport.softwaregrp.com/doc/KM03518316 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-11661 · Nota de Segurança